WP Testimonials < 1.4.4 - Authenticated (Contributor+) SQL Injection

Description The WP Testimonials plugin for WordPress is vulnerable to SQL Injection via the 'widgetid' parameter in all versions up to, and including, 1.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

WordPress WP Testimonials Plugin <= 1.4.3 is vulnerable to SQL Injection

Software WP Testimonials Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-25924 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID ad45f04259df Credits Le Ngoc Anh Required privilege Administrator...

Testimonial Page Manager Cross-Site Scripting Vulnerability

Testimonial Page Manager is a versatile web application for rems individual developers designed to simplify the process of presenting customer feedback and testimonials. A cross-site scripting vulnerability exists in Testimonial Page Manager version 1.0, which stems from the parameter...

WordPress WP Testimonials Plugin <= 1.4.3 is vulnerable to SQL Injection

Software WP Testimonials Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE N/A Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a4ededc265b9 Credits WordFence Required privilege Contributor Published 15 Januar...

WordPress Strong Testmionials Plugin < 3.1.11 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:machothemes:strongtestimonials"; if description...

CVE-2023-52123

Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...

CVE-2023-52123

Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...

CVE-2023-52123 WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...

CVE-2023-52123

CVE-2023-52123 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WPChill Strong Testimonials, affecting version 3.1.10 and earlier. Per NVD, impact is high (C/H/I/H) with CVSS 3.1 base score 8.8. PatchStack documents a lower severity (CVSS 3.1 base 4.3) and notes...

CVE-2023-52123 WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...

CVE-2023-52123: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...

PT-2024-14420 · Wpchill · Wpchill Strong Testimonials

Name of the Vulnerable Software and Affected Versions: WPChill Strong Testimonials versions 3.1.10 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application th...

WordPress Plugin Strong Testimonials Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Strong Testimonials suffers from a...

WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Strong Testimonials Type Plugin Vulnerable versions = 3.1.10 Fixed in 3.1.11 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-52123 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6a5da45fead3 Credits Brandon Rolda...

CVE-2023-48283

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5...

CVE-2023-48283

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5...

CVE-2023-48283

CVE-2023-48283 affects the WordPress plugin Simple Testimonials Showcase (PressTigers) up to version 1.1.5. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be exploited by unauthenticated attackers to trigger actions on behalf of site admins. Public sources concur this is a CSRF...

CVE-2023-48283 WordPress Simple Testimonials Showcase Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5...